As the digital world continues to dominate our personal and work lives, it’s no surprise that cybersecurity has become critical for individuals and organizations.

But society is racing toward “digital by default”, which can be a hardship for individuals unable to access digital services. People depend on these digital services for essential online services, including financial, housing, welfare, healthcare and educational services. Inclusive security ensures that such services are as widely accessible as possible and provides digital protections to users regardless of the individual’s capabilities, abilities and resources.

Therefore, to adequately address cybersecurity risks, we must also consider accessibility and inclusivity. But not everyone has equal access to digital devices or skill sets, leaving them more vulnerable to cyberattacks. The COVID-19 pandemic also underscored the significant role digital access plays in society.

Let’s examine the significance of accessible and inclusive cybersecurity and the steps we can take to enhance security for all.

What is accessible and inclusive cybersecurity?

Accessible and inclusive cybersecurity refers to designing and implementing cybersecurity measures to fit the needs of all individuals. This implies designing policies, procedures and technologies with those with disabilities or other marginalized groups in mind.

The goal of accessible and inclusive cybersecurity is to guarantee that everyone has equal access to the tools and resources necessary for protection from cyber threats — including anyone with limited physical access to digital devices, limited technical skill sets or other barriers.

By making cybersecurity more accessible and inclusive, we can create a more equitable and secure digital environment for everyone.

Unfortunately, the statistics are not in our favor. Accessibility issues remain a major challenge for those who are digitally excluded. According to 2022 data from the World Bank, approximately 3 billion people worldwide remain offline due to factors like income, geography, education and disability.

Individuals left out of the digital world often need access to tools and resources to protect themselves against cyberattacks.

Why accessibility matters are so critical

Accessibility issues pose a significant hurdle for those who are digitally excluded.

But what is digital exclusion? It refers to the absence of physical access to digital devices, the inability to develop skills needed in the digital world and access disparities based on factors like income or location.

Physical access to digital devices can be a significant barrier for anyone living with disabilities or in remote areas. Individuals with visual impairments may find it difficult to use devices that do not have accessible features, such as screen readers or magnification tools. Additionally, those living in these remote places may lack high-speed internet or reliable electricity, thus restricting their capacity to utilize modern technology.

Skills to navigate the digital world present a significant obstacle for digitally excluded people. A 2021 report from Pew Research Center revealed that 14% of adults with a high school education or less do not use the internet. Many cited a lack of digital skills as their primary barrier. Without the knowledge and ability to protect oneself online from threats such as viruses and phishing attempts, individuals may become more susceptible to cyber crimes due to their inability to recognize and mitigate potential dangers.

Finally, factors like income and geography can severely limit access to digital technology and resources. In many places around the world, individuals living in low-income areas may not have access to high-speed internet or may lack the financial means to purchase digital devices. This presents a major obstacle for those trying to make ends meet.

When it comes to cyber threats, accessibility issues are a significant concern for those who are digitally excluded and can immensely impact an individual’s capacity to protect themselves.

COVID-19 and the importance of digital access and cybersecurity

The COVID-19 pandemic has brought about profound changes to our daily lives, such as how we access essential services and work. With social distancing measures in place, many have turned to digital technology for healthcare, education and other essential needs. Furthermore, many companies have moved towards remote work models, further underscoring the significance of secure digital access and cybersecurity measures.

However, the transition to digital technology has also highlighted the digital divide and the challenges faced by those it excludes. People may struggle to access healthcare services or work remotely without reliable internet or devices. Similarly, those without strong digital skills could be more vulnerable to cyber threats when navigating unfamiliar digital environments.

The COVID-19 pandemic has presented cybersecurity risks. As more people rely on the internet to work and access essential services, cyber criminals are launching more advanced attacks. According to a report from the FBI, reported cyber crimes increased dramatically after the pandemic. These incidents can have devastating results, such as financial loss, identity theft and damage to personal and professional reputations.

COVID-19 has brought to light the essential role digital access and cybersecurity play in our society. Moving forward, it is essential to address the digital divide and design cybersecurity measures with accessibility and inclusivity in mind.

Steps to promote accessible and inclusive cybersecurity

Improving accessible and inclusive cybersecurity is a complex challenge. Moving forward requires the collaboration of stakeholders such as governments, technology companies and civil society organizations.

Still, there are steps that can be taken to promote accessibility and inclusivity in cybersecurity:

Create accessible cybersecurity policies and standards. Governments and technology companies should collaborate to develop policies and standards that guarantee cybersecurity measures are accessible and inclusive, taking into account the needs of people with disabilities and other marginalized groups. These rules and standards should be tailored specifically for this purpose.

Provide digital skills training. Offering digital skills training can give digitally excluded individuals the confidence to go digital and protect themselves from cyber threats. Governments, technology companies and civil society organizations all have a role to play in providing this type of instruction.

Ensure digital devices and software are accessible. Digital devices and software should be designed with accessibility features like screen readers or magnification tools in mind — enabling individuals with disabilities to utilize modern technology and protect themselves from cyber threats.

Address inequalities of access. Governments and technology companies should collaborate to address disparities in access to digital technology and resources. This could include initiatives that increase access to high-speed internet and digital devices.

Involve individuals with disabilities and other marginalized groups in cybersecurity decision-making. It is essential to include individuals with disabilities and other marginalized groups in cybersecurity decision-making, so their needs and perspectives can guide the process.

Equitable cybersecurity is the future

Improving accessible and inclusive cybersecurity is a daunting challenge. However, it’s also a critical step toward creating a more equitable and secure digital space for everyone. By working together, we can design cybersecurity measures with inclusivity in mind so that everyone has equal access to the tools and resources needed to protect themselves against cyber threats.

More from Intelligence & Analytics

Hive0051’s large scale malicious operations enabled by synchronized multi-channel DNS fluxing

12 min read - For the last year and a half, IBM X-Force has actively monitored the evolution of Hive0051’s malware capabilities. This Russian threat actor has accelerated its development efforts to support expanding operations since the onset of the Ukraine conflict. Recent analysis identified three key changes to capabilities: an improved multi-channel approach to DNS fluxing, obfuscated multi-stage scripts, and the use of fileless PowerShell variants of the Gamma malware. As of October 2023, IBM X-Force has also observed a significant increase in…

Email campaigns leverage updated DBatLoader to deliver RATs, stealers

11 min read - IBM X-Force has identified new capabilities in DBatLoader malware samples delivered in recent email campaigns, signaling a heightened risk of infection from commodity malware families associated with DBatLoader activity. X-Force has observed nearly two dozen email campaigns since late June leveraging the updated DBatLoader loader to deliver payloads such as Remcos, Warzone, Formbook, and AgentTesla. DBatLoader malware has been used since 2020 by cybercriminals to install commodity malware remote access Trojans (RATs) and infostealers, primarily via malicious spam (malspam). DBatLoader…

New Hive0117 phishing campaign imitates conscription summons to deliver DarkWatchman malware

8 min read - IBM X-Force uncovered a new phishing campaign likely conducted by Hive0117 delivering the fileless malware DarkWatchman, directed at individuals associated with major energy, finance, transport, and software security industries based in Russia, Kazakhstan, Latvia, and Estonia. DarkWatchman malware is capable of keylogging, collecting system information, and deploying secondary payloads. Imitating official correspondence from the Russian government in phishing emails aligns with previous Hive0117 campaigns delivering DarkWatchman malware, and shows a possible significant effort to induce a sense of urgency as…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today